[dns-operations] if you're banning ANY queries, don't forget to ban SOA as well

Paul Vixie paul at redbarn.org
Sat Sep 3 03:15:05 UTC 2016


% dig @ord.sns-pb.isc.org vixie.sf.ca.us soa +dnssec
...
;; Query time: 56 msec
;; SERVER: 2001:500:71::30#53(2001:500:71::30)
;; WHEN: Sat Sep 03 03:13:19 UTC 2016
;; MSG SIZE  rcvd: 2045

(hint: this is sarcasm. banning ANY is silly.)

-- 
P Vixie



More information about the dns-operations mailing list